AWS Devops Engineer with HashiCorp, ForgeRock & Microsoft Entra ID

📄Visas: USC/ EAD/L2 EAD/TN


Job Overview

We are seeking a Senior AWS DevOps Engineer / Technical Lead with 12+ years of experience to drive the architecture, automation, and operational resilience of our enterprise cloud infrastructure and application deployment pipelines. In this role, you will lead the implementation of modern CI/CD practice using Harness, secure secrets management with HashiCorp Vault, streaming ecosystem operations with Apache Kafka, and seamless identity integrations via ForgeRock and Microsoft Entra ID.

Key Responsibilities

1. Cloud Infrastructure & AWS Application Deployment

·         AWS Architecture & Orchestration: Design, deploy, and optimize highly available, scalable, and secure cloud environments on AWS using Infrastructure as Code (IaC) (Terraform or AWS CloudFormation).

·         Application Deployment: Manage end-to-end containerized and serverless application deployments using AWS ECS, EKS (Kubernetes), Lambda, and Application Load Balancers (ALB).

·         Kafka Operations: Support and maintain Apache Kafka / AWS MSK message streams, ensuring high throughput, data retention policies, cluster monitoring, and schema registry integration.

2. CI/CD Pipeline Automation & Secrets Management

·         Pipeline Delivery (Harness): Build, optimize, and standardize modern deployment pipelines using Harness to automate progressive delivery (Canary, Blue/Green, Rollbacks) across multiple environments.

·         Secrets Security (HashiCorp Vault): Architect and maintain enterprise secrets management using HashiCorp Vault. Implement dynamic secret generation, PKI, and automated injection into application deployment pipelines.

3. Identity, Access & IAM Integrations

·         Identity Infrastructure: Integrate cloud applications and platforms with ForgeRock and Microsoft Entra ID (formerly Azure AD) for SSO, OAuth2/OIDC protocols, multi-factor authentication, and centralized access policies.

·         AWS IAM Governance: Enforce the principle of least privilege by configuring complex AWS IAM roles, policies, and cross-account access controls.

4. Observability, Security & Operations

·         Monitoring & Alerts: Implement end-to-end observability, distributed tracing, and logging using AWS CloudWatch, Prometheus, Grafana, or Datadog.

·         Security & Compliance: Ensure compliance with enterprise security baselines, conduct regular vulnerability assessments, and automate drift detection.

Required Technical Skills & Qualifications

·         AWS Expertise: Deep hands-on experience with core AWS services (EC2, VPC, IAM, S3, ECS/EKS, Lambda, CloudWatch, Route53, KMS).

·         Deployment & CI/CD: Hands-on experience architecting CI/CD pipelines in Harness (or enterprise tools like GitLab CI/Jenkins).

·         Secrets Management: Extensive experience setting up and administering HashiCorp Vault (policies, backends, dynamic secrets).

·         Identity Management: Experience integrating applications with ForgeRock (Identity Platform/Access Management) and Microsoft Entra ID (Azure AD).

·         Messaging & Data Pipelines: Familiarity with Apache Kafka or AWS MSK cluster configuration and operational maintenance.

·         Infrastructure as Code (IaC): Proficient in Terraform, CloudFormation, or AWS CDK.

·         Scripting & Automation: Strong proficiency in Python, Bash, or Go for custom automation scripts.

Preferred / Bonus Qualifications

·         Certifications: AWS Certified DevOps Engineer – Professional or AWS Certified Solutions Architect – Professional.

·         HashiCorp Certified Vault Associate / Professional.

·         Solid background in enterprise Kubernetes administration (CKA/CKAD).

·         Experience with zero-trust network models and DevSecOps integrations.